tag:blogger.com,1999:blog-13756280.post115326253839968275..comments2017-09-25T03:39:30.429-07:00Comments on Jeremiah Grossman: 5 challenges of web application scanningJeremiah Grossmanhttp://www.blogger.com/profile/05017778127841311186noreply@blogger.comBlogger3125tag:blogger.com,1999:blog-13756280.post-1153332279423407702006-07-19T11:04:00.000-07:002006-07-19T11:04:00.000-07:00This might be worth a look.The paper is named Tain...This might be worth a look.<BR/><BR/>The paper is named <BR/><BR/><A HREF="http://seclab.cs.sunysb.edu/seclab/pubs/papers/usenix_sec06.pdf" REL="nofollow">Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks</A>albertnoreply@blogger.comtag:blogger.com,1999:blog-13756280.post-1153328043063057312006-07-19T09:54:00.000-07:002006-07-19T09:54:00.000-07:00Accuracy is one part, but the 50% estimate was spe...Accuracy is one part, but the 50% estimate was specific to the types of tests we can "perform" in an automated fashion. Its another metric on how accurate were are in determining if that test was successful or not. What I try to get at is some websites you can completely automate the tests on, others, almost none. The majority of websites fall somewhere in between. The problem is figuring out which is which.Jeremiah Grossmanhttps://www.blogger.com/profile/05017778127841311186noreply@blogger.comtag:blogger.com,1999:blog-13756280.post-1153269078087039662006-07-18T17:31:00.000-07:002006-07-18T17:31:00.000-07:00ive thought about this, it seems that it might be ...ive thought about this, it seems that it might be possible to gain more than 50% accuracy with web application scanners. You can generate logical diagrams from the code we read from the webservers and the scripts used. We all require methods and algorithms, teaching AI general rules and making them generalize and apply it to the real world may not happen anytime soon. The board space is finite in chess but when you approach problems like the game of go, the requirements increase and the resources you have are limited. The web seems to have unlimited possibilites, however, sometimes it is limited to the unconfigured servers for example.albertnoreply@blogger.com